UBB.threads PHP Forum Software Community Forums UBB.threads 7 Version 7 Support I appear to have been hacked after patch

banner ads are displaying on the forum that i did not authorize. Gizmo put in the recent security patch, so this may be a new issue.

The ads appear to be just in the display topics area. not in areas such as new topic or full reply topic screens.

they do not show on the list of forums nor the list of topics in a forum.

here is discussion:

http://ambergriscaye.com/forum/ubbthreads.php/topics/417272.html

i emailed Gizmo but he's not responded yet and i am getting gross banners on the screen and would love any help that is available.

they show at the top and bottom of each topic. some folks are seeing three copies at each spot, tho i just see one.

thanks to anyone who is available.

Humm,
I don't see them. Possibly Gizmo fixed it by now.

yep he did. they got in and edited well here's gizmospeak:

I took the ads out of showflat.tpl; they weren't using a CI, it was direct code:
<div align="center">
<script type="text/javascript"><!--
google_ad_client = "pub-9447465705825247";
/* 728x90,create 11-9-22 */
google_ad_slot = "9943124205";
google_ad_width = 728;
google_ad_height = 90;
//-->
</script>
<script type="text/javascript" src="http://pagead2.googlesyndication.com/pagead/show_ads.js">
</script>
</div>

the file was edited today.

i had looked thru several of these templates but i wasn't sure which one showed that part of the screen. answer: showflat.tpl

he also put a password on the control panel, which is glorious!

I don't want a public post for details. Don't want to help the hackers
But was this issue caused by pre or post patch upgrade?

Pre patch issues that just weren't set forth till today; SirDude logged in and cleared out all of the trojans on the server

Thank God!
I thought Sirdude had to go back to the drawing board again.
SD, Don't take the valium yet!
If you did, Enjoy the break!

Yeah, I was rattling my brain trying to figure out what was going on; since he's been patched since before the patches even came out lol

So it was a oversight?
They hacked it before the patch.
Easy to miss since there are many many scripts to check.
Glad you found it though.

Lol yeah; basically...